{"vulnerability": "cve-2026-14890", "sightings": [{"uuid": "18203dfd-6f50-4953-a27b-163e6ddafc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlcw3ngt2i", "content": "CVE-2026-14890 - CVE-2026-14890\nCVE ID : CVE-2026-14890\n \n Published : July 16, 2026, 2:43 p.m. | 51\u00a0minutes ago\n \n Description : SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authenticat...", "creation_timestamp": "2026-07-16T15:44:46.422208Z"}, {"uuid": "977d2857-b283-4a32-bb03-ff1215cbd4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrtd76h2w", "content": "CVE-2026-14890 - sglang\nSGLang's backup feature can be exploited by a malicious actor to run unauthorized code on the system if it's enabled and accessible from the internet. This could lead to unauthorized access or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sglang #CVE #infosec", "creation_timestamp": "2026-07-16T18:52:04.319798Z"}, {"uuid": "c591c950-33f8-43c2-a453-54a1b6d155c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrcvdrnuhp2w", "content": "CVE-2026-14890 is an unpatched SGLang vulnerability enabling unauthenticated remote code execution through pickle deserialization. Restrict access now.\n\n#SGLang #CVE202614890 #RCE #Pickle #AI #LLM #CERTCC #Vulnerability", "creation_timestamp": "2026-07-23T12:59:29.065229Z"}]}